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Processor Modes 


* The ARM has six operating modes: 
User (unprivileged mode under which most tasks run) 
FIQ (entered when a high priority (fast) interrupt is raised) 
IRQ (entered when a low priority (normal) interrupt is raised) 


Supervisor (entered on reset and when a Software Interrupt instruction is 
executed) 


Abort (used to handle memory access violations) 
Undef (used to handle undefined instructions) 
* ARM Architecture Version 4 adds a seventh mode: 
e System (privileged mode using the same registers as user mode) 
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The Registers 


* ARM has 37 registers in total, all of which are 32-bits long. 
e | dedicated program counter 
e | dedicated current program status register 
e 5 dedicated saved program status registers 
e 30 general purpose registers 


* However these are arranged into several banks, with the accessible 
bank being governed by the processor mode. Each mode can access 


e a particular set of r0-r12 registers 
e a particular r13 (the stack pointer) and rl14 (link register) 
e r15 (the program counter) 
e cpsr (the current program status register) 
and privileged modes can also access 


¢ a particular spsr (saved program status register) 
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Register Organisation 


General registers and Program Counter 
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Register Example: 
User to FIQ Mode 


Registers in use : Registers in use 
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Accessing Registers using 
ARM Instructions 


* No breakdown of currently accessible registers. 


e All instructions can access r0-r14 directly. 


e Most instructions also allow use of the PC. 
* Specific instructions to allow access to CPSR and SPSR. 


* Note : When in a privileged mode, it is also possible to load / store the 
(banked out) user mode registers to or from memory. 


¢ See later for details. 
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The Program Status Registers 
(CPSR and SPSRs) 


28 


FCC a A Ree 
MW 


Copies of the ALU status flags (latched if the 
instruction has the "S" bit set). 


Condition Code Flags Interrupt Disable bits. 


N = Negative result from ALU flag. _ : eee — HG | 


Z = Zero result from ALU flag. 


C = ALU operation Carried out ; : 
- T Bit (Architecture v4T only) 
V = ALU operation oVerflowed T= O.DrocesGr iW ARM Stic 


Mode Bits T = 1, Processor in Thumb state 


M/[4:0] define the processor mode. 
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Flag 
Negative 
(N='1’) 
Zero 
(Z="1’) 


Carry 
(C="1’) 


oVerflow 
(V="1’) 


Condition Flags 


Logical Instruction 


No meaning 


Result is all zeroes 


After Shift operation 
‘1’ was left in carry flag 


No meaning 
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Arithmetic Instruction 


Bit 31 of the result has been set 
Indicates a negative number in 
signed operations 


Result of operation was zero 


Result was greater than 32 bits 


Result was greater than 31 bits 
Indicates a possible corruption of 
the sign bit in signed 

numbers 
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The Program Counter (R15) 


When the processor is executing in ARM state: 
e All instructions are 32 bits in length 
e All instructions must be word aligned 


e Therefore the PC value is stored in bits [31:2] with bits [1:0] equal to 
Zero (as instruction cannot be halfword or byte aligned). 


R14 is used as the subroutine link register (LR) and stores the return 
address when Branch with Link operations are performed, 
calculated from the PC. 


Thus to return from a linked branch 
* MOV r15,r14 

or 
* MOV ipe,1r 
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Exception Handling 
and the Vector Table 


* ‘When an exception occurs, the core: 
* Copies CPSR into SPSR_<mode> 
: : 0x00000004 | Undefined Instruction 
¢ Sets appropriate CPSR bits 
0x00000008 | Software Interrupt 


~ If core implements ARM Architecture 4T and is TE Te 
currently in Thumb state, then 0x0000000C 


e ARM state is entered. 0x00000010 
~ Interrupt disable flags if appropriate. 0x00000018 | IRQ 
FIQ 


¢ Maps in appropriate banked registers ON 
e Stores the “return address” in LR_<mode> 
e Sets PC to vector address 
* To return, exception handler needs to: 
¢ Restore CPSR from SPSR_<mode> 
¢ Restore PC from LR_<mode> 


M@ POWERED 
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The Instruction Pipeline 


* ‘The ARM uses a pipeline in order to increase the speed of the flow of 
instructions to the processor. 
e Allows several operations to be undertaken simultaneously, rather than 
serially. 


Instruction fetched from memory 


Decoding of registers used in instruction 


Register(s) read from Register Bank 
Shift and ALU operation 
Write register(s) back to Register Bank 
* Rather than pointing to the instruction being executed, the 
PC points to the instruction being fetched. 
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Quiz #1 - Verbal 


What registers are used to store the program counter and link register? 


What is r13 often used to store? 


Which mode, or modes has the fewest available number of registers 
available? How many and why? 
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ARM Instruction Set Format 


3 8 
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Instruction type 
Data processing / PSR Transfer 


Multiply 

Long Multiply (v3M/v4 only) 
Swap 

Load/Store Byte/Word 
Load/Store Multiple 


Halfword transfer : Immediate offset (v4 only) 
Halfword transfer: Register offset (v4 only) 
Branch 

Branch Exchange (v4T only) 
Coprocessor data transfer 
Coprocessor data operation 
Coprocessor register transfer 


Software interrupt 
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Conditional Execution 


Most instruction sets only allow branches to be executed conditionally. 


However by reusing the condition evaluation hardware, ARM effectively 
increases number of instructions. 


e All instructions contain a condition field which determines whether the 
CPU will execute them. 


¢ Non-executed instructions soak up | cycle. 


— Still have to complete cycle so as to allow fetching and decoding of 
following instructions. 


This removes the need for many branches, which stall the pipeline (3 
cycles to refill). 


e Allows very dense in-line code, without branches. 


¢ The Time penalty of not executing several conditional instructions is 
frequently less than overhead of the branch 
or subroutine call that would otherwise be needed. 
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The Condition Field 


0000 = EQ - Z set (equal) 
0001 = NE - Z clear (not equal) 


0010 =HS/CS -C set (unsigned 
higher or same) 


0011 =LO/CC - C clear (unsigned 
lower) 


0100 = MI -N set (negative) 


0101 = PL - N clear (positive or 
ZerO) 


0110 = VS - V set (overflow) 
0111 = VC - V clear (no overflow) 
1000 = HI - C set and Z clear 


1001 = LS - C clear or Z (set unsigned 
lower or same) 


1010 = GE - N set and V set, or N clear 
and V clear (>or =) 


1011 =LT - N set and V clear, or N clear 
and V set (>) 


1100 = GT - Z clear, and either N set and 
V set, or N clear and V set (>) 


1101 = LE- Z set, or N set and V clear,or 
N clear and V set (<, or =) 


1110 = AL - always 
1111 =NV - reserved. 


(unsigned higher) 
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Using and updating the 
Condition Field 


* To execute an instruction conditionally, simply postfix it with the 
appropriate condition: 


e For example an add instruction takes the form: 
= ADD. O05 ele ir , rO = rl + r2 (ADDAL) 
e To execute this only if the zero flag is set: 


— ADDEQ r0,rl1,r2 ; If zero flag set then... 
Bo tte EO) Ss ok SEO 


* By default, data processing operations do not affect the condition flags 
(apart from the comparisons where this is the only effect). To cause the 
condition flags to be updated, the S bit of the instruction needs to be set 
by postfixing the instruction (and any condition code) with an ‘‘S”’. 


e For example to add two numbers and set the condition flags: 


= ADDS: EO ji lg FZ . 0 = el <b 2 
Y <6 and settlags 
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Branch instructions (1) 


* Branch: B{<cond>} label 
* Branch with Link : BL{<cond>} sub routine _ label 


31 28 27 25 24 23 0 


—s Link bit 0 = Branch 
1 = Branch with link 
Condition field 


* The offset for branch instructions is calculated by the assembler: 


e By taking the difference between the branch instruction and the 
target address minus 8 (to allow for the pipeline). 


This gives a 26 bit offset which is right shifted 2 bits (as the 
bottom two bits are always zero as instructions are word — 
aligned) and stored into the instruction encoding. 


This gives a range of + 32 Mbytes. 
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Branch instructions (2) 


When executing the instruction, the processor: 
e shifts the offset left two bits, sign extends it to 32 bits, and adds it to PC. 


Execution then continues from the new PC, once the pipeline has been 
refilled. 


The "Branch with link" instruction implements a subroutine call by 
writing PC-4 into the LR of the current bank. 


e i.e. the address of the next instruction following the branch with link 
(allowing for the pipeline). 


To return from subroutine, simply need to restore the PC from the LR: 
®. MOV ‘pC, LE 
e Again, pipeline has to refill before execution continues. 

The "Branch" instruction does not affect LR. 

Note: Architecture 4T offers a further ARM branch instruction, BX 
e See Thumb Instruction Set Module for details. 
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Data processing Instructions 


Largest family of ARM instructions, all sharing the same instruction 
format. 


Contains: 

e Arithmetic operations 

e Comparisons (no results - just set condition codes) 

¢ Logical operations 

e Data movement between registers 
Remember, this is a load / store architecture 

e These instruction only work on registers, NOT memory. 
They each perform a specific operation on one or two operands. 

e First operand always a register - Rn 

e Second operand sent to the ALU via barrel shifter. 
We will examine the barrel shifter shortly. 
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Arithmetic Operations 


* Operations are: 
e ADD operand! + operand2 
ADC operand! + operand2 + carry 
SUB operand! - operand2 
SBC operand! - operand2 + carry -1 
RSB operand2 - operand 1 
¢ RSC operand2 - operand! + carry - | 
* Syntax: 
¢ <Operation>{<cond>}{S} Rd, Rn, Operand2 
* Examples 
¢ ADD 10, rl, r2 
¢ SUBGT 13, 13, #1 
¢ RSBLES r4, r5, #5 
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Comparisons 


The only effect of the comparisons is to 

¢ UPDATE THE CONDITION FLAGS. Thus no need to set S bit. 
Operations are: 

¢« CMP operand] - operand2, but result not written 

¢« CMN operand! + operand2, but result not written 

¢ TST operand! AND operand2, but result not written 

e TEQ operand! EOR operand2, but result not written 
Syntax: 

e <Operation>{<cond>} Rn, Operand2 
Examples: 

¢ CMP rO, rl 

« TSTEQ 12, #5 
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Logical Operations 


* Operations are: 

e AND operand! AND operand2 

e EOR operand! EOR operand2 

¢ ORR operand! OR operand2 

« BIC operand! AND NOT operand2 [ie bit clear] 
* Syntax: 

¢ <Operation>{<cond>}{S} Rd, Rn, Operand2 
* Examples: 

e AND rO, rl, r2 

« BICEQ r2, 13, #7 

¢ EORS r1,r3,r0 
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Data Movement 


* Operations are: 

e MOV operand2 

e MVN NOT operand2 

Note that these make no use of operand1. 

* Syntax: 

e <Operation>{<cond>}{S} Rd, Operand2 
* Examples: 

¢ MOV rO, rl 

¢ MOVS 12, #10 

¢ MVNEQ ss 11,#0 


The ARM Instruction Set - ARM University Program - 


The ARM Instruction Set - ARM University Program - V1.0 


Quiz #2 


* Convert the GCD 
algorithm given in this 
flowchart into 


1) “Normal” assembler, 
where only branches can 
be conditional. 


2) ARM assembler, where 
all instructions are 
conditional, thus 
improving code density. 


* ‘The only instructions you 
need are CMP, B and SUB. 
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Quiz #2 - Sample Solutions 


‘Normal’? Assembler 


gcd cmp r0O, rl ; reached the end? 
beq stop 
bit ,if r0 > rl 
sub ;subtract rl from r0 
bal 

less sub ;subtract r0O from rl 
bal 

stop 


ARM Conditional Assembler 


gcd cmp r0O, rl ,;if rO0 > rl 
subgt r0O, r0, rl ;subtract rl from r0O 
sublt rl, rl, rO ;else subtract r0O from rl 
bne gcd ; reached the end? 


@ POWERED 
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The Barrel Shifter 


The ARM doesn’t have actual shift instructions. 


Instead it has a barrel shifter which provides a mechanism to carry out 
shifts as part of other instructions. 


So what operations does the barrel shifter support? 
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Barrel Shifter - Left Shift 


* Shifts left by the specified amount (multiplies by powers of two) e.g. 
LSL #5 = multiply by 32 


Logical Shift Left (LSL) 
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Barrel Shifter - Right Shifts 


Logical Shift Right 
eShifts right by the 


specified amount 
(divides by powers of ..0 —~| Destination 
two) e.g. 


LSR #5 = divide by 32 


Logical Shift Right 


Arithmetic Shift Right Arithmetic Shift Right 
eShifts right (divides by 


powers of two) and 
preserves the sign bit, i Destination 
for 2's complement 


operations. e.g. Sign bit shifted in 
ASR #5 = divide by 32 
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Barrel Shifter - Rotations 


e Similar to an ASR but the 


bits wrap around as they . . 
leave the LSB and appear as Destination 
the MSB. 

e.g. ROR #5 


¢ Note the last bit rotated is 
also used as the Carry Out. 


Rotate Right Extended (RRX) 
Rotate Right through Carry 


e This operation uses the 
CPSR C flag as a 33rd bit. 


¢ Rotates right by 1 bit. Destination 
Encoded as ROR #0. 


The ARM Instruction Set - ARM University Program - 


Using the Barrel Shifter: 
The Second Operand 


Operand Operand ~<———~ |* Register, optionally with shift 
1 2 operation applied. 


| * Shift value can be either be: 


e 5 bit unsigned integer 


Barrel ° Specified in bottom byte of 
\ another register. 
Shifter 
| \|* Immediate value 


¢ § bit number 


¢ Can be rotated right through 
an even number of 
positions. 


e Assembler will calculate 
rotate for you from 
constant. 


Result 
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Second Operand : 
Shifted Register 


* The amount by which the register is to be shifted is contained in 
either: 


e the immediate 5-bit field in the instruction 
— NO OVERHEAD 
— Shift is done for free - executes in single cycle. 


e the bottom byte of a register (not PC) 


— Then takes extra cycle to execute 


— ARM doesn’t have enough read ports to read 3 registers at 
once. 


— Then same as on other processors where shift is 
separate instruction. 


* If no shift is specified then a default shift is applied: LSL #0 


e i.e. barrel shifter has no effect on value in register. 
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Second Operand : 
Using a Shifted Register 


Using a multiplication instruction to multiply by a constant means first 
loading the constant into a register and then waiting a number of 
internal cycles for the instruction to complete. 


A more optimum solution can often be found by using some combination 
of MOVs, ADDs, SUBs and RSBs with shifts. 


¢ Multiplications by a constant equal to a ((power of 2) + 1) can be done in 


one cycle. 


Example: r0 = r1 * 5 
Example: r0 = rl + (rl * 4) 


1 ADD r0, rl, rl, LSL #2 


Example: r2 = r3 * 105 

Example: r2 = r3 * 15 * 7 

Example: r2 = r3 * (16 - 1) * (8 - 1) 
1 RSB r2, r3,r3, LSL #4 3 r2=r3* 15 
1 RSB r2,r2,r2, LSL #3 3 r2=r2*7 
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Second Operand : 
Immediate Value (1) 


There is no single instruction which will load a 32 bit immediate constant 
into a register without performing a data load from memory. 


e All ARM instructions are 32 bits long 
e ARM instructions do not use the instruction stream as data. 


The data processing instruction format has 12 bits available for 
operand2 


e If used directly this would only give a range of 4096. 
Instead it is used to store 8 bit constants, giving a range of 0 - 255. 


These 8 bits can then be rotated right through an even number of 
positions (ie RORs by 0, 2, 4,..30). 


e This gives a much larger range of constants that can be directly loaded, 
though some constants will still need to be loaded 
from memory. 
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Second Operand : 
Immediate Value (2) 


This gives us: 

¢ 0-255 [O - Oxff] 

° 256,260,264,..,1020 [0x 100-Ox3fc, step 4, 0x40-Oxff ror 30] 

¢ 1024,1040,1056,..,4080 [0x400-Oxff0, step 16, 0x40-Oxff ror 28] 

¢ 4096,4160, 4224,..,16320 [Ox 1000-0x3fcO, step 64, 0x40-Oxff ror 26] 
These can be loaded using, for example: 

e MOV 10, #0x40, 26 ;=> MOV 10, #0x1000 (ie 4096) 


To make this easier, the assembler will convert to this form for us if 
simply given the required constant: 


e MOV 10, #4096 >=> MOV 10, #0x1000 (ie 0x40 ror 26) 


The bitwise complements can also be formed using MVN: 
¢ MOV r0, #Ox FRFFFFFFF ; assembles to MVN r0, #0 


If the required constant cannot be generated, an error will 
be reported. 
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Loading full 32 bit constants 


Although the MOV/MVN mechansim will load a large range of constants 
into a register, sometimes this mechansim will not generate the required 
constant. 


Therefore, the assembler also provides a method which will load ANY 32 
bit constant: 
e LDR rd,=numeric constant 


If the constant can be constructed using either a MOV or MVN then this 
will be the instruction actually generated. 


Otherwise, the assembler will produce an LDR instruction with a PC- 
relative address to read the constant from a literal pool. 

e LDR r0,=0x42 ; generates MOV r0,#0x42 

e LDR r0,=0x55555555 ; generate LDR r0,[pc, offset to lit pool] 


As this mechanism will always generate the best instruction for a given 
case, it is the recommended way of loading constants. 
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Multiplication Instructions 


The Basic ARM provides two multiplication instructions. 
Multiply 

e MUL{<cond>}{S} Rd, Rm, Rs ; Rd = Rm * Rs 
Multiply Accumulate — - does addition for free 

¢ MLA{<cond>}{S} Rd, Rm, Rs,Rn ; Rd = (Rm * Rs) + Rn 
Restrictions on use: 

e Rd and Rm cannot be the same register 


— Can be avoid by swapping Rm and Rs around. This works because 
multiplication is commutative. 


e Cannot use PC. 
These will be picked up by the assembler if overlooked. 
Operands can be considered signed or unsigned 


e Up to user to interpret correctly. 
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Multiplication Implementation 


* The ARM makes use of Booth’s Algorithm to perform integer 
multiplication. 


* On non-M ARMs this operates on 2 bits of Rs at a time. 
e For each pair of bits this takes 1 cycle (plus 1 cycle to start with). 


¢ However when there are no more 1|’s left in Rs, the multiplication will 
early-terminate. 


* Example: Multiply 18 and -1 : Rd = Rm * Rs 


Rm 18 8 Rs 
Re 41m 


17 cycles 4 cycles 


* Note: Compiler does not use early termination criteria to 
decide on which order to place operands. 
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Extended Multiply Instructions 


* M variants of ARM cores contain extended multiplication 
hardware. This provides three enhancements: 


e An 8 bit Booth’s Algorithm is used 


— Multiplication is carried out faster (maximum for standard 
instructions is now 5 cycles). 


e Early termination method improved so that now completes 
multiplication when all remaining bit sets contain 


— all zeroes (as with non-M ARMs), or 
— all ones. 


Thus the previous example would early terminate in 2 cycles in 
both cases. 


¢ 64 bit results can now be produced from two 32bit operands 
— Higher accuracy. 


— Pair of registers used to store result. 
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Multiply-Long and 
Multiply-Accumulate Long 


Instructions are 
¢ MULL which gives RdHi,RdLo:=Rm*Rs 
e MLAL which gives RdHi,RdLo:=(Rm*Rs)+RdHi,RdLo 


However the full 64 bit of the result now matter (lower precision 
multiply instructions simply throws top 32bits away) 


¢ Need to specify whether operands are signed or unsigned 


Therefore syntax of new instructions are: 
¢ UMULL{<cond>}{S} RdLo,RdHi,Rm,Rs 
¢ UMLAL{<cond>}{S} RdLo,RdHi,Rm,Rs 
e SMULL{<cond>}{S} RdLo, RdHi, Rm, Rs 
e SMLAL{<cond>}{S} RdLo, RdHi, Rm, Rs 
Not generated by the compiler. 


Warning : Unpredictable on non-M ARMs. 
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Quiz #3 


1. Specify instructions which will implement the following: 
a) r0 = 16 b) rl =r0*4 
c)r0=rl/16(rl signed 2's comp.) d)rl =12 * 7 


2. What will the following instructions do? 
a) ADDS 10, rl, rl, LSL #2 b) RSB r2, rl, #0 


3. What does the following instruction sequence do? 
ADD 10, rl, rl, LSL #1 
SUB 10, 10, rl, LSL #4 
ADD 10, r0, rl, LSL #7 
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Load / Store Instructions 


The ARM is a Load / Store Architecture: 
e Does not support memory to memory data processing operations. 
e Must move data values into registers before using them. 

This might sound inefficient, but in practice isn’t: 
e Load data values from memory into registers. 


e Process data in registers using a number of data processing 
instructions which are not slowed down by memory access. 


e Store results from registers out to memory. 


The ARM has three sets of instructions which interact with main 
memory. These are: 


e Single register data transfer (LDR / STR). 
e Block data transfer (LDM/STM). 
e Single Data Swap (SWP). 
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Single register data transfer 


The basic load and store instructions are: 
¢ Load and Store Word or Byte 
— LDR/STR/LDRB/STRB 


ARM Architecture Version 4 also adds support for halfwords and signed 
data. 


e Load and Store Halfword 
— LDRH/STRH 

¢ Load Signed Byte or Halfword - load value and sign extend it to 32 bits. 
— LDRSB /_LDRSH 


All of these instructions can be conditionally executed by inserting the 
appropriate condition code after STR / LDR. 


e e.g. LDREQB 
Syntax: 
¢ <LDR|STR>{<cond>}{<size>} Rd, <address> 
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Load and Store Word or Byte: 
Base Register 


* ‘The memory location to be accessed is held in a base register 


e STR 10, [rl] ; Store contents of rO to location pointed to 
; by contents of rl. 


e LDR 12, [rl] ; Load r2 with contents of memory location 
; pointed to by contents of rl. 


r0 Memory 


Source 
Register 


for STR 


r r2 Destnai 
Base estination 
Register ——* 0x200 Register 


for LDR 
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Load and Store Word or Byte: 
Offsets from the Base Register 


As well as accessing the actual location contained in the base register, 
these instructions can access a location offset from the base register 
pointer. 


This offset can be 
e An unsigned 12bit immediate value (ie 0 - 4095 bytes). 
e A register, optionally shifted by an immediate value 
This can be either added or subtracted from the base register: 
e Prefix the offset value or register with ‘+’ (default) or *-’. 
This offset can be applied: 
e before the transfer is made: Pre-indexed addressing 


— optionally auto-incrementing the base register, by postfixing the 
instruction with an ‘!’. 


e after the transfer is made: Post-indexed addressing 


— causing the base register to be auto-incremented. 
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Load and Store Word or Byte: 
Pre-indexed Addressing 


* Example: STR 10, [r1,#12] Memory i Source 


Register 
for STR 
= 


Base 
Register L0X200 | 


* To store to location 0x1f4 instead use: STR 10, [r1,#-12] 
* To auto-increment base pointer to 0x20c use: STR 10, [rl, #12]! 


* Tf r2 contains 3, access 0x20c by multiplying this by 4: 
e STR 10, [rl, r2, LSL #2] 


> 
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Load and Store Word or Byte: 
Post-indexed Addressing 


* Example: STR 10, [rl], #12 


Updated Offset Source 


Base <a [12 ayabe Register 
Register for STR 


Original Z 
Register 
* To auto-increment the base register to location 0x1f4 instead use: 
e STR 10, [rl], #-12 


* Tf r2 contains 3, auto-incremenet base register to 0x20c by multiplying 
this by 4: 


e STR 10, [rl], r2, LSL #2 


> 
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Load and Stores 
with User Mode Privilege 


* When using post-indexed addressing, there is a further form of 
Load/Store Word/Byte: 


¢ <LDR|STR>{<cond>}{B}T Rd, <post_indexed_address> 


* When used in a privileged mode, this does the load/store with user mode 
privilege. 


¢ Normally used by an exception handler that is emulating a memory 
access instruction that would normally execute in user mode. 
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Example Usage of 
Addressing Modes 


* Imagine an array, the first element of which is pointed to by the contents 


of r0. 
; Memory 
If we want to access a particular element, element Offset 


then we can use pre-indexed addressing: 
e rl is element we want. 
e LDR r2, [r0, rl, LSL #2] 


Pointer to 


f 
If we want to step through every Slee ey 


element of the array, for instance 
to produce sum of elements in the 
array, then we can use post-indexed addressing within a loop: 


e rl is address of current element (initially equal to rQ). 
e LDR 12, [rl], #4 


Use a further register to store the address of final element, 
so that the loop can be correctly terminated. 


The ARM Instruction Set - ARM University Program - V1.0 


Offsets for Halfword and 
Signed Halfword / Byte Access 


* The Load and Store Halfword and Load Signed Byte or Halfword 
instructions can make use of pre- and post-indexed addressing in much 
the same way as the basic load and store instructions. 


* However the actual offset formats are more constrained: 


e The immediate value is limited to 8 bits (rather than 12 bits) giving an 
offset of 0-255 bytes. 


e The register form cannot have a shift applied to it. 
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Effect of endianess 


The ARM can be set up to access its data in either little or big 
endian format. 


Little endian: 


e Least significant byte of a word is stored in bits 0-7 of an addressed 
word. 


Big endian: 


e Least significant byte of a word is stored in bits 24-31 of an 
addressed word. 


This has no real relevance unless data is stored as words and then 
accessed in smaller sized quantities (halfwords or bytes). 


e Which byte / halfword is accessed will depend on the endianess of 
the system involved. 
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Endianess Example 


rO = 0x11223344 


2423 1615 


31 2423 1615 : —- 1615 87 O 
rl = 0x100 11 22 33 22 11 rl = 0x100 


Little-endian Big-endian 


312423 1615 au 31 2423 1615 
| 
00 00 00 


r2 = 0x44 r2 = Oxll 
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Quiz #4 


Write a segment of code that add together elements x to x+(n-1) of an 
array, where the element x=0 is the first element of the array. 
Each element of the array is word sized (ie. 32 bits). 
The segment should use post-indexed addressing. 
At the start of your segments, you should assume that: 

e rOQ points to the start of the array. Floments 
e rl =x 


e r2=n 


n elements 


> 
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Quiz #4 - Sample Solution 


r0, rl, LSL#2 ; Set rO to address of element x 
r0, r2, LSL#2 ; Set r2 to address of element n+1 


#0 > Initialise counter 


Access element and move to next 
ri, ; Add contents to counter 
r0, ; Have we reached element x+n? 
loop ; If not —- repeat for 
: next element 
on exit sum contained in rl 
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Block Data Transfer (1) 


* ‘The Load and Store Multiple instructions (LDM / STM) allow betweeen 
1 and 16 registers to be transferred to or from memory. 


* The transferred registers can be either: 
e Any subset of the current bank of registers (default). 


e Any subset of the user mode bank of registers when in a priviledged 
mode (postfix instruction with a ‘%’). 


28 27 24 23 22 21 20 19 16 15 


(Sl [Tell se eT [eae 


aussie field rela ——- Each bit corresponds to a particular 
Up/Down bit Load/Store bit register. For example: 


¢ Bit O set causes r0 to be transferred. 
0 = Down; subtract offset from base 0 = Store to memory 


¢ Bit 0 unset causes r0 not to be transferred. 
1 = Up ; add offset to base Ps ad Hon nenosy At least one register must be 


Pre/Post indexing bit Write- back bit transferred as the list cannot be empty. 
0 = Post; add offset after transfer, 0 = no write-back 
1 = Pre ; add offset before transfer 1 = write address into base 

PSR and force user bit 

0 = don’t load PSR or force user mode 

1 = load PSR or force user mode 
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Block Data Transfer (2) 


* Base register used to determine where memory access should occur. 


e 4 different addressing modes allow increment and decrement inclusive or 
exclusive of the base register location. 


e Base register can be optionally updated following the transfer (by 
appending it with an ‘!’. 


e Lowest register number is always transferred to/from lowest memory 
location accessed. 


* These instructions are very efficient for 
e Saving and restoring context 
— For this useful to view memory as a stack. 
¢ Moving large blocks of data around memory 


— For this useful to directly represent functionality of the instructions. 


> 
rs 
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Stacks 


* A stack is an area of memory which grows as new data is “pushed” onto 
the ‘‘top” of it, and shrinks as data is “‘popped”’ off the top. 


* Two pointers define the current limits of the stack. 
e A base pointer 
— used to point to the “bottom” of the stack (the first location). 
e A stack pointer 


— used to point the current “top” of the stack. 


PUSH 
{1,2,3} 


Result 
pop = 


> 
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Stack Operation 


Traditionally, a stack grows down in memory, with the last ‘“‘Spushed”’ 
value at the lowest address. The ARM also supports ascending stacks, 
where the stack structure grows up through memory. 


The value of the stack pointer can either: 
e Point to the last occupied address (Full stack) 
— and so needs pre-decrementing (ie before the push) 
e Point to the next occupied address (Empty stack) 
— and so needs post-decrementing (ie after the push) 
The stack type to be used is given by the postfix to the instruction: 
e STMED / LDMED : Full Descending stack 
e STMFA / LDMFA : Full Ascending stack. 
e STMED /LDMED : Empty Descending stack 
e STMEA /LDMEA : Empty Ascending stack 
* Note: ARM Compiler will always use a Full descending stack. 
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Stack Examples 


STMFD sp!, STMED sp!, STMFA sp!, STMEA sp!, 
{r0,r1, r3-4r5} {r0,r1, r3-4r5} {r0,r1,r3-r5} {r0,r1,r3-4r5} 


Qo 
Lu 
c 
= 
oOo 
[a 
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Stacks and Subroutines 


* One use of stacks is to create temporary register workspace for 
subroutines. Any registers that are needed can be pushed onto the stack 
at the start of the subroutine and popped off again at the end so as to 
restore them before return to the caller : 

SIMFD: spl, t20=r1Z,.. LE} ; stack all registers 


; and the return address 


LDMFD- ‘spl, {r0=—r12,. pe} ; load all the registers 


; and return automatically 


* See the chapter on the ARM Procedure Call Standard in the SDT 
Reference Manual for further details of register usage within 
subroutines. 


If the pop instruction also had the ‘S’ bit set (using ‘“’) then the transfer 
of the PC when in a priviledged mode would also cause the SPSR to be 
copied into the CPSR (see exception handling module). 
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Direct functionality of 
Block Data Transfer 


* When LDM / STM are not being used to implement stacks, it is clearer to 
specify exactly what functionality of the instruction is: 


¢ i.e. specify whether to increment / decrement the base pointer, before or 
after the memory access. 


* Tn order to do this, LDM /STM support a further syntax in addition to 
the stack one: 


e STMIA/LDMIA : Increment After 

e STMIB / LDMIB : Increment Before 

¢ STMDA/LDMDA : Decrement After 
e STMDB / LDMDB : Decrement Before 
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Example: Block Copy 


Copy a block of memory, which is an exact multiple of 12 words long 
from the location pointed to by r12 to the location pointed to by r13. rl4 
points to the end of block to be copied. 


points to the start of the source data 
points to the end of the source data 
points to the start of the destination data 
LDMIA PI2t, ~ro=r ll}: 3° boad: 43 bytes 
STMIA r13i, {rO-rll} ; and. store them r14—> 
CMP PVP. tA ; check for the end 
BNE loop ; and loop until done 


r1l3 —~> 


Increasing 


This loop transfers 48 bytes in 31 cycles 
Over 50 Mbytes/sec at 33 MHz 
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Quiz #5 


* The contents of registers r0 to r6 need to be swapped around thus: 
r0 moved into r3 
rl moved into r4 
r2 moved into r6 
r3 moved into r5 
r4 moved into r0 
r5 moved into rl 
r6 moved into r2 


* Write a segment of code that uses full descending stack operations to 
carry this out, and hence requires no use of any other registers for 
temporary storage. 


> 
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Quiz #5 - Sample Solution 


STMFD sp!, LDMFD sp!, 
{r0-r6} {r3,r4,r6} 


ousp>[__| 
16 | 
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Swap and Swap Byte 
Instructions 


Atomic operation of a memory read followed by a memory write 
which moves byte or word quantities between registers and 
memory. 


Syntax: 
e SWP{<cond>}{B} Rd, Rm, [Rn] 


* ‘Thus to implement an actual swap of contents make Rd = Rm. 


* ‘The compiler cannot produce this instruction. 


> 
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Software Interrupt (SWI) 


28 27 24 23 


Cond 11141 Comment field (ignored by Processor) 


L_ Condition Field 


In effect, a SWI is a user-defined instruction. 


It causes an exception trap to the SWI hardware vector (thus causing a 
change to supervisor mode, plus the associated state saving), thus causing 
the SWI exception handler to be called. 


The handler can then examine the comment field of the instruction to 
decide what operation has been requested. 


By making use of the SWI mechansim, an operating system can 
implement a set of privileged operations which applications running in 
user mode can request. 


See Exception Handling Module for further details. 
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PSR Transfer Instructions 


MRS and MSR allow contents of CPSR/SPSR to be transferred from 
appropriate status register to a general purpose register. 


e All of status register, or just the flags, can be transferred. 
Syntax: 
¢e MRS{<cond>} Rd, <psr> ; Rd = <psr> 
¢ MSR{<cond>} <psr>,Rm * <psr> = Rm 
¢ MSR{<cond>} <psrf>,Rm > <psrf> = Rm 
where 
e <DSte- = CPOR, :*CPSR akiy (SPom OF Pook aitL 
* <psri> = CPSR-fLq Or -SPSRUtig 
Also an immediate form 
e MSR{<cond>} <psrf>,#Immediate 


¢ This immediate must be a 32-bit immediate, of which the 4 
most significant bits are written to the flag bits. 


> 
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Using MRS and MSR 


* Currently reserved bits, may be used in future, therefore: 
e they must be preserved when altering PSR 


e the value they return must not be relied upon when testing other bits. 


31 4 0 


28 8 
INigldvp fir ote] 


* Thus read-modify-write strategy must be followed when modifying any 
PSR: 


e Transfer PSR to register using MRS 

¢ Modify relevant bits 

e Transfer updated value back to PSR using MSR 
* Note: 


e In User Mode, all bits can be read but only the flag bits can 
be written to. 
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Coprocessors 


The ARM architecture supports 16 coprocessors 


Each coprocessor instruction set occupies part of the ARM instruction 
set. 


There are three types of coprocessor instruction 
e Coprocessor data processing 
¢ Coprocessor (to/from ARM) register transfers 
¢ Coprocessor memory transfers (load and store to/from memory) 


Assembler macros can be used to transform custom coprocessor 
mneumonics into the generic mneumonics understood by the processor. 


A coprocessor may be implemented 
e in hardware 
e in software (via the undefined instruction exception) 


e in both (common cases in hardware, the rest in software) 
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Coprocessor Data Processing 


* This instruction initiates a coprocessor operation 
* ‘The operation is performed only on internal coprocessor state 


¢ For example, a Floating point multiply, which multiplies the contents of 
two registers and stores the result in a third register 
* Syntax: 
“CDP (<cond>} <Cpo-num->,;<opc..1>,CRd;,CRn,CRm,{<0pc 2 >} 


28 27 26 25 24 23 


rat of oat [om [ora |evnom ove )o] om 


Destination Register Opcode 


Source Registers 
Opcode 


Condition Code Specifier 
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Coprocessor Register 
Transfers 


These two instructions move data between ARM registers and 
coprocessor registers 


¢ MRC: Move to Register from Coprocessor 
e MCR: Move to Coprocessor from Register 
An operation may also be performed on the data as it is transferred 


e For example a Floating Point Convert to Integer instruction can be 
implemented as a register transfer to ARM that also converts the data 
from floating point format to integer format. 


Syntax 
° <MRC |MCR> {<cond>} <cp.num=>,<0pc >,Rd;CRn,CRm, Soe a4 


28 27 26 25 24 23 22 21 20 19 16 15 L210. 


[cond fata exp] oe | [one [op om 


[ 
| ARM Source/Dest Register eae | 


Coprocesor Source/Dest Registers 
Condition Code Specifier Transfer To/From Coprocessor 
Opcode 
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Coprocessor Memory 
Transfers (1) 


* Load from memory to coprocessor registers 


* Store to memory from coprocessor registers. 


28 27 26 25 24 23 22 21 20 19 16 15 12 11 0 


LEU 


| 
| ee Register Address Offset 


Base Register 
Load/Store 
Condition Code Specifier Base Register Writeback 
Transfer Length 


Add/Subtract Offset 
Pre/Post Increment 
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Coprocessor Memory 
Transfers (2) 


* Syntax of these is similar to word transfers between ARM and memory: 
e <LDC|STC>{<cond>} {<L>} <cp_num>,CRd, <address> 
— PC relative offset generated if possible, else causes an error. 
° <LDC |STC>{<cond>} {<L>} <cp_num>,CRd,<[Rn, offset] {!}> 


— Pre-indexed form, with optional writeback of the base register 


¢ <LDC|STC>{<cond>}{<L>} <cp_num>,CRd,<[Rn],offset> 


— Post-indexed form 
where 


e <L> when present causes a “long” transfer to be performed (N=1) else 
causes a “short” transfer to be performed (N=0). 


— Effect of this is coprocessor dependant. 
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Quiz #6 


* Write a short code segment that performs a mode change by modifying 
the contents of the CPSR 


The mode you should change to is user mode which has the value 0x10. 


This assumes that the current mode is a priveleged mode such as 
supervisor mode. 


This would happen for instance when the processor is reset - reset code 
would be run in supervisor mode which would then need to switch to 
user mode before calling the main routine in your application. 


You will need to use MSR and MRS, plus 2 logical operations. 


28 
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Quiz #6 - Sample Solution 


* Set up useful constants: 


mmask EQU Oxlft > mask to clear mode bits 


userm EQU Ox10 > user mode value 


* Start off here in supervisor mode. 
MRS PU. “Cper * take a copy of the CPSR 
BIC r0, r0, #mmask ; clear the mode bits 
ORR r0,r0, #userm - select new mode 


MSR Gpsry,. 10 ; write back the modified 
gL Se 


* End up here in user mode. 
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Main features of the 
ARM Instruction Set 


All instructions are 32 bits long. 
Most instructions execute in a single cycle. 
Every instruction can be conditionally executed. 
A load/store architecture 
e Data processing instructions act only on registers 
— Three operand format 


— Combined ALU and shifter for high speed bit manipulation 


e Specific memory access instructions with powerful auto-indexing 
addressing modes. 


— 32 bit and 8 bit data types 
and also 16 bit data types on ARM Architecture v4. 
— Flexible multiple register load and store instructions 


* Instruction set extension via coprocessors 
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